CVE-2007-3844
- State
- Published
- Severity
- Not scored
- Published
- Aug 8, 2007
- Updated
- Aug 7, 2024
- Reserved
- Jul 18, 2007
Description
Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and SeaMonkey 1.1.3 allows remote attackers to conduct cross-site scripting (XSS) attacks with chrome privileges via an addon that inserts a (1) javascript: or (2) data: link into an about:blank document loaded by chrome via (a) the window.open function or (b) a content.location assignment, aka "Cross Context Scripting." NOTE: this issue is caused by a CVE-2007-3089 regression.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- FEDORA-2007-2601vendor-advisory
- https://issues.rpath.com/browse/RPL-1600
- USN-503-1vendor-advisory
- MDVSA-2008:047vendor-advisory
- ADV-2007-3587vdb-entry
- 27414third-party-advisory
- HPSBUX02156vendor-advisory
- http://bugzilla.mozilla.org/show_bug.cgi?id=388121
- 26393third-party-advisory
- 26303third-party-advisory
- ADV-2007-4256vdb-entry
- 26309third-party-advisory
- HPSBUX02153vendor-advisory
- 27298third-party-advisory
- MDKSA-2007:152vendor-advisory
- GLSA-200708-09vendor-advisory
- 1018481vdb-entry
- DSA-1345vendor-advisory
- 26288third-party-advisory
- 27327third-party-advisory
- 27276third-party-advisory
- DSA-1391vendor-advisory
- DSA-1346vendor-advisory
- RHSA-2007:0980vendor-advisory
- SUSE-SA:2007:057vendor-advisory
- MDVSA-2007:047vendor-advisory
- 28135third-party-advisory
- 27356third-party-advisory
- RHSA-2007:0981vendor-advisory
- 25142vdb-entry
- FEDORA-2007-3431vendor-advisory
- http://www.mozilla.org/security/announce/2007/mfsa2007-26.html
- ADV-2008-0082vdb-entry
- 103177vendor-advisory
- USN-493-1vendor-advisory
- 26234third-party-advisory
- DSA-1344vendor-advisory
- 1018480vdb-entry
- 27325third-party-advisory
- RHSA-2007:0979vendor-advisory
- 1018479vdb-entry
- 26258third-party-advisory
- 27326third-party-advisory
- 28363third-party-advisory
- 26331third-party-advisory
- 26460third-party-advisory
- 27680third-party-advisory
- 20070801 FLEA-2007-0039-1 firefoxmailing-list
- http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html
- 201516vendor-advisory
- oval:org.mitre.oval:def:9493vdb-entrysignature
- 20070803 FLEA-2007-0040-1 thunderbirdmailing-list
- 26335third-party-advisory
- 26572third-party-advisory
- SSA:2007-213-01vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.